On a day to day basis I get asked why companies should care more about red teams. Often within the same sentence it is stated that a standard penetration test is sufficient and that other forms of offensive security assessmentsRead More
In March 2017 my colleague Meiyer Goren and myself have been requested through our employer Comsec by one of our clients to do an assessment on their new mainframe setup. They had decided a year earlier to replace their regularRead More
Wouldn’t it be an amazing sight? Artificial Intelligent Sentinels communicating each other through neural networks, digging deep through big data. Al for making the world a safer place. This is what the future looks like: Cyber Reasoning Systems (CRS) willRead More
Why People Matter Most? Security is not about Technology. I’m a big advocate of this statement and pose it anywhere I possible can. Why? Because nowadays the security vendor landscape seems to be all about the holy grail and “nextgenRead More
…and I can’t get rid of it. It must mean something. Ever since I was a little boy I loved playing with computers, taking them apart and trying to improve them. I always have been intrigued by how a humanRead More
update 29/6/2017: Wiper instead of ransomware? What is it? A new variant of the Petya ransomware (Also named NotPeyta or Nyetya by other companies) is on the loose. It uses a known and legitimate method of spreading on top ofRead More
Introduction to the Incident Recently we where notified by a large international company of an incident in one of its sites in the US. The incident resulted in the spread of the computer worm QakBot.T onto an estimate of 160Read More
This is a story that i have to tell; it’s impossible to ignore. I spend a couple of days of my time talking to one of the largest companies in the world… They have been looking for ethical hackers / securityRead More
Easily two-thirds of the value of any given web vulnerabilities assessment comes from the use of automated web vulnerability scanners. At least that’s been my experience. I certainly don’t have the knowledge – or the time – to manually trackRead More
I’m amazed every single day about the way people think about normal-life security inside companies. Big or small; everybody has weaknesses that go unnoticed until disaster strikes. Whether it’s an employee, a disgruntled employee or an external entity who gained accessRead More